Privacy Policy

Effective [EFFECTIVE DATE]

The short version. We never store your work email. We keep a scrambled code made from it, so we can recognise you and hide your colleagues. Your company name is never shown to anyone. Your photo stays blurred until you both say yes. Chats are deleted after 7 days unless you mark that you made a plan. You can delete everything yourself, at any time, from Privacy → Delete my account.

1. Who we are

Lunchbreak (lunchbreak.cc) is run by [OPERATOR LEGAL NAME], [POSTAL ADDRESS] ("we", "us"). We decide why and how your personal data is processed, which makes us the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. For any privacy question or request, write to our Grievance Officer at grievance@lunchbreak.cc (details on the Grievance page).

2. What we collect and why

Data	How we keep it	Why
Work email	Used once to send your login code. Stored only as a one-way keyed hash, never as the address itself.	Verify you are a working professional; recognise you when you log in.
Company (email domain)	Stored only as a one-way keyed hash. We never store or show the company name.	Hide you from your own colleagues, unless you both choose otherwise.
Profile: first name, date of birth, gender, who you want to meet, role, industry, city, work area, usual hours, prompt answer	Stored as you enter it. Others see your age, not your date of birth.	Show your profile to people you may match with, and choose who appears in your drop.
Photo	A small JPEG, plus a tiny blurred preview.	Others see the blurred preview until you both say yes (unless you turn that setting off).
Likes, passes, matches and messages	Stored to run the service.	Matching and chat.
Hidden people	Their email as a one-way keyed hash, plus a masked label for you (e.g. "ra***@company.com").	Keep those people and you invisible to each other.
Notification email (optional)	Encrypted. Can be a personal address.	Tell you about new matches, your weekly drop, and chats about to close.
Reports	The reason you write and a hash identifying the reported account. Your identity as the reporter is not stored.	Safety and moderation.
Login session	A random token in a secure cookie; we store only its hash.	Keep you logged in.

We do not collect your contacts, location, phone number or device identifiers, we do not use advertising or analytics trackers, and we do not sell or rent personal data. Our hosting provider sees your IP address to deliver the site and block attacks; we do not store it in our database.

3. Who can see what

People in your weekly drop see your first name, age, role, industry, work area, usual hours, prompt answer, and a blurred photo. They also see that your work email was verified.
Your matches also see your photo, and the messages you send them.
Your colleagues (same email domain) never see you, unless you and they both turn on "Open to colleagues". Even then, your company, team and title are not shown.
People you hide never see you, and you never see them.
Us: our admins can see reported profiles to handle reports. We do not read your chats unless a chat is reported or the law requires it.

When the watermark setting is on, profiles you view are stamped with your name and a short ID. This discourages screenshots; it cannot prevent them.

4. Service providers and where data is stored

Cloudflare, Inc. hosts the website and database. The database is stored in Cloudflare's Asia-Pacific region.
Resend sends our emails (login codes and, if you turn them on, notifications). It receives the email address and the message text, and processes it in Japan.

Both process data on our instructions only. Some of this processing happens outside India, as permitted under the DPDP Act.

5. How long we keep it

Login codes: 10 minutes. Login sessions: 30 days, or until you log out.
Chats: deleted 7 days after you match, unless one of you marks "We made a plan". We email you 2 days before deletion if you turned on notifications.
Weekly drops: about 4 weeks.
Email queue: 14 days. Resolved reports: 180 days.
Your account: until you delete it. Deletion is immediate. Encrypted database backups kept by our host for disaster recovery roll off within 30 days.
If an account is banned for breaking our Terms, we keep only the hash of its email, so it cannot sign up again.

6. Your rights

Access and correction: see and edit your profile anytime in the app. For a copy of everything we hold about you, write to the Grievance Officer.
Erasure: Privacy → Delete my account removes your profile, photo, matches, messages and settings right away.
Withdraw consent: turn off notifications, pause your profile, or delete your account. Withdrawing is as easy as giving consent.
Grievance: write to the Grievance Officer. If you are not satisfied, you can complain to the Data Protection Board of India.
Nominate: you may nominate someone to exercise these rights if you die or become unable to. Write to the Grievance Officer to do this.

7. Age

Lunchbreak is only for people 18 and older. We check the date of birth you enter and delete any account we learn belongs to someone younger.

8. Security

Emails and company domains are stored as keyed hashes. Notification emails are encrypted. Connections use HTTPS. Sessions use secure, HTTP-only cookies. Login codes are rate-limited. If a breach affects your personal data, we will tell you and the Data Protection Board without delay, with what happened and what you can do.

9. Changes

If we change this policy in a way that matters, we will show a notice in the app before the change applies.